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Top Stories 

• The Alabama Fire Marshal’s Office confirmed March 25 that a cease-and-desist order was 
issued that closes the production portion of the Ultratec fireworks plant in Madison County 
following a deadly explosion in February. - WAFF 48 Huntsville (See item 1) 

• A stretch of U.S. 400 in Wilson County, Kansas, that closed March 25 due to a fatal multi- 
vehicle accident was expected to reopen by March 27. - KSNW 3 Wichita (See item 7) 

• The governor of Indiana declared a health emergency March 26 in southeastern Indiana 
after the Indiana State Department of Health recorded 79 HIV cases connected to 
intravenous drug use in Scott County. - Indianapolis Star; Associated Press (See item 15) 

• One fatality was reported following tornado-producing storms that moved across 
Oklahoma, March 25 and caused severe damage to a mobile home park and businesses, 
knocked out power to nearly 75,000 customers, closed Interstate 35 in Moore, and 
prompted Moore Public Schools to cancel classes March 26. - Weather.com (See item 26) 
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Energy Sector 

See item 26 
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Chemical Industry Sector 

1. March 26, WAFF 48 Huntsville - (Alabama) Fire marshal: Victim of fatal blast 
reported unsafe work environment. The Alabama Fire Marshal’s Office confirmed 
March 25 that a cease-and-desist order was issued that closes the production portion of 
the Ultratec fireworks plant in Madison County following a deadly explosion in 
February. The State’s fire marshal cited the company for five violations, including 
improper storage of materials and cross-contamination concerns, following an 
inspection of the facility. 

Source: http://www.waff.com/storv/28614817/portion-of-fireworks-plant-to-close- 
following-deadly-explosion 

For another story, see item 6 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. March 25, Pittsburgh Tribune -Review - (Illinois) U.S. Steel to idle Illinois plant, shed 
up to 2,080 more workers. U.S. Steel announced March 25 that its Granite City 
Works steel flat-rolling plant would be temporarily shut down as part of a consolidation 
of steelmaking operations across the U.S. in response to market conditions. The 
company stated that steel coil-rolling operations for pipes and other products will 
continue at other plants. 

Source: http://triblive.com/business/headlines/8045318-74/steel-operations-prices 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 
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3. March 25, Reuters - (International) PayPal to pay $7.7 million in U.S. Treasury 
sanctions case. PayPal agreed to pay $7.7 million March 25 to settle U.S. Department 
of the Treasury charges for failing to adequately screen transactions for several years, 
resulting in 486 violations of sanctions programs against countries including Iran, 

Cuba, and Sudan, as well as for a specific Turkish national on the sanctions blacklist 
that had been tied to proliferators of weapons of mass destruction. 

Source: http://www.reuters.com/article/2015/03/25/us-usa-treasurv-ebav- 
idUSKBN0ML286201 50325 

4. March 25, Reuters - (California) U.S. jury convicts former bank exec of securities 
fraud. The former chief operating officer of United Commercial Bank in San Francisco 
was convicted March 25 of several criminal counts, including securities fraud, for 
allegedly concealing the falling value of collateral used to secure the bank’s loans from 
auditors during the 2008 financial crisis. 

Source: http://www.reuters.com/article/2015/03/25/fraud-tarp-trial- 
idUSL2N0WR2QM201 50325 

5. March 25, Associated Press - (Ohio) Ohio businessmen convicted in sports drink 
investment scheme. Two Ohio businessmen were convicted March 25 of charges 
relating to a fraud scheme in which they used their sport drink company, Imperial 
Integrated Health Research and Development LLC, to defraud investors out of about $9 
million and diverted investors’ funds for their personal use. The wife of one of the 
businessmen was also convicted on several charges which included filing a false 
income tax return and structuring financial transactions to evade currency reporting 
requirements. 

Source: http://abcnews.go.com/US/wireStorv/ohio-businessmen-convicted-sports- 
drink- investment-scheme-299 10890 
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Transportation Systems Sector 

6. March 26, Florence Times Daily - (Alabama) U.S. 72 reopens to two-way traffic in 
westbound lanes near Cherokee. Two-way traffic on U.S. 72 near Cherokee resumed 
using only the westbound lanes of the highway after a 9 hour closure of all lanes March 
26 that was prompted by a fire in the trailer of a semi-truck hauling more than 7,000 
pounds of chemicals. A 2-mile stretch of the eastbound lanes remained closed while the 
fire continued to smolder and authorities investigated the cause of the blaze. 

Source: http://www.timesdailv.com/news/local/u-s-remains-closed-near-cherokee-after- 
-wheeler- fire/article 26 158ebe-7269-55e5-94b4-d5e Ife25f9ab.html 

7. March 26, KSNW 3 Wichita - (Kansas) One dead in Wilson County collision. A 
stretch of U.S. 400 in Wilson County was closed March 25 due to a multi- vehicle 
accident that killed the driver of a vehicle when she lost control on the wet roadway 
and crossed into oncoming traffic. The road was expected to reopen no later than 
March 27. 

Source: http://ksn.com/2015/03/25/u-s-400-closed-in-wilson-countv-due-to-collision/ 
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8. March 25, Associated Press - (Nevada) US Highway 95 reopens after train 

derailment north of Fallon. A stretch of U.S. Highway 95 near Fallon, Nevada, was 
closed in both directions for more than 2 hours March 25 while HAZMAT crews 
investigated a Union Pacific freight train derailment in the area. Traffic was reopened 
after crews determined there was no threat to public safety and declared the area safe. 
Source: http://www.timesunion.com/news/article/US-Highway-95-reopens-after-trail- 
derailment-6 159476.php 

For another story, see item 26 
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Food and Agriculture Sector 

9. March 26, KNWA 50 Rogers - (Arkansas) NWA Chicken Farm Damaged in 
Tornado. Four buildings at a chicken farm in Clifty, Arkansas, were damaged by a 
reported tornado or strong straight line winds that ripped through the area March 25. 
Damage was estimated to total about $500,000. 

Source: http://www.ozarksfirst.corn/storv/d/storv/nwa-chicken-farm-damaged-in- 
severe-storm/29065/S0A 5gExeEyAKXrlm7Rfbg 

10. March 26, Miami Herald - (Florida) Fourth man arrested in connection with illegal 
slaughterhouse in South Miami-Dade. A fourth individual was arrested March 24 
following a 5-month-long investigation into CoCo Farm in Miami-Dade County where 
police allege that the operators were running an illegal slaughterhouse and animals 
were malnourished and killed in vicious ways. Authorities recovered over 3,000 
animals, including about 100 of which had to be euthanized, after busting the 
slaughterhouse March 12. 

Source: http://www.msn.com/en-us/news/crime/fourth-man-arrested-in-connection- 
with-illegal-slaughterhouse-in-south-miami-dade/ar-AAaOAgc 

11. March 25, U.S. Food and Drug Administration - (National) La Terra Fina recalls 
various products due to supplier recall of organic spinach. The U.S. Food and Drug 
Administration reported March 24 that La Terra Fina recalled 3 of its products after the 
company received a recall notice from its organic spinach supplier because of possible 
Listeria monocytogenes exposure. The affected products were distributed exclusively 
to Costco stores in the Northwest, Midwest, Northeast, and Southeast regions of the 
U.S., and Smart & Final stores along the West Coast only. 

Source: http://www.fda.gov/Safetv/Recalls/ucm439940.htm 

12. March 25, U.S. Food and Drug Administration - (International) Lindt USA issues 
allergy alert on undeclared hazelnuts in Chocolate Covered Raisin and Chocolate 
Covered Almond Bags. Swiss chocolatier Lindt & Sprungli issued a voluntary recall 
for up to 56 bags of its 6.4-ounce Chocolate Covered Raisins and Chocolate Covered 
Almonds sold in 9 Lindt Chocolate Shop locations across the U.S. due to undeclared 
hazelnuts. 



- 4 - 



Source: http://www.fda.gov/Safety/Recalls/ucm439873.htm 
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Water and Wastewater Systems Sector 

13. March 25, KWQC 6 Davenport - (Iowa) Iowa DNR monitoring wastewater 

discharge in Clinton. The Iowa Department of Natural Resources is investigating after 
a malfunction caused 2 out of 3 main pumps in the wastewater collection system for the 
city of Clinton to fail and pump about 500 gallons per hour of untreated wastewater 
into the Mississippi River for several hours March 24. The pumps were repaired and 
officials cited a possible faulty valve as the source of the failure, while the city 
announced its plans to collect water samples near the site of the discharge. 

Source: http://kwqc.com/2015/03/25/iowa-dnr-monitoring-wastewater-discharge-in- 
clinton/ 



14. March 25, WFLA 8 Tampa Bay - (Florida) Bacteria health advisory issued for 4 
Tampa Bay area beaches. The Florida Department of Health issued a health advisory 
for four Hillsborough County beaches after water samples taken March 23 exceeded 
the enterococci bacteria standard recommended by the U.S. Environmental Protection 
Agency. Officials will resample the beaches March 30, and the advisories will be lifted 
after the water quality is deemed satisfactory. 

Source: http://www.wfla.com/storv/28611038/bacteria-health-advisory-issued-for-4- 
tampa-bay-area-beaches 
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Healthcare and Public Health Sector 



15. March 26, Indianapolis Star; Associated Press - (Indiana) Governor approves short- 
term needle exchange in HIV epidemic. The governor of Indiana declared a health 
emergency March 26 in southeastern Indiana after the Indiana State Department of 
Health recorded 79 HIV cases connected to intravenous drug use in Scott County. The 
governor also announced that the State would sanction a short-term needle-exchange 
program to last for 30 days to help address the epidemic. 

Source: http://www.indvstar.com/storv/news/politics/2015/03/25/gov-pence-visit- 
indi ana-count y-hiv-outbreak/7 0427432/ 



16. March 25, Lowell Sun - (Massachusetts) Tewksbury State Hospital pharmacy tech 
accused of Oxycodone theft. Authorities charged a former pharmacy technician at 
Tewksbury State Hospital in Lowell, Massachusetts, March 25 for allegedly taking 
4,098 Oxycodone pills from the hospital’s medication dispensing machine during his 
time of employment. The former employee had his license suspended and was accused 
of rigging the machine in order to take the pills. 

Source: http://www.lowellsun.com/breakingnews/ci 27785249/tewksbury-state- 
hospital-pharmacy-tech-accused-oxycodone-theft 
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17. March 25, East Bay Express - (California) Alta Bates Summit Medical Center in 
Oakland fined for infectious disease safety violations. California’s Division of 
Occupational Safety and Health reached a settlement in March with Alta Bates Summit 
Medical Center in Oakland addressing three citations against the medical center for six 
violations, including failing to transfer potential tuberculosis patients to airborne 
infection isolation rooms. Sutter Health, the medical center’s affiliated company, 
agreed to pay $71,275 in penalties, and Alta Bates Summit will to take corrective steps 
regarding the violations. 

Source: http://www.eastbavexpress.com/SevenDavs/archives/2015/03/25/alta-bates- 
summit-medical-center-in-oakland-fined-for-infectious-disease-safety- violations 



18. March 25, SC Magazine - (National) Amedisys notifies nearly 7,000 individuals of 
potential breach. Amedisys notified 6,909 current and former patients that their 
personal and medical information may be at risk after the company reported that it is 
unable to locate 142 encrypted laptops and computers that were assigned to former 
employees. The health and hospice care company stated that there was no indication of 
a breach of their network after learning that the devices were assigned to clinicians or 
other team members for use between 2011 and 2014 who failed to return the devices. 
Source: http://www.scmagazine.com/amedisvs-notifies-nearly-7000-individuals-of- 
potential-breach/article/405456/ 
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Government Facilities Sector 

19. March 25, Fairbanks Daily News-Miner - (Alaska) Fairbanks city website repaired 
after hackers attack. Officials reported March 25 that hackers took down the 
Fairbanks city government’s Web site for about 4 hours March 24 and replaced it with 
a message from the group. The city announced that no information was accessed or 
breached in the attack. 

Source: http://www.newsminer.com/news/local news/fairbanks-city-website-repaired- 
after-l.r;:ck.ei\s-atiac)'.7an:'.. le 44a5e7a8^j2c2; 1. 1 e4ffifO(Tg32M 32d5792dhm] 

20. March 25, Statesboro Herald - (Georgia) 5 children taken to ER after bus accident. 
A truck and a bus collided on Veterans Memorial Parkway in Bulloch County causing 
five Langston Chapel Elementary School students and the bus driver to be transported 
to an area hospital for injuries March 25. 

Source: http://www.statesboroherald.eom/section/l/article/66709/ 

For another story, see item 26 



[ Return to top ] 

Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

21. March 26, Softpedia - (International) Microsoft revokes rogue digital certificate 
for Google and other web domains. Microsoft updated its Certificate Trust List 
(CTL) for Windows operating systems and pushed automatic updates to revoke a 
certificate fraudulently issued by Egypt-based MCS Holdings. The fraudulent 
certificates affected several Google and other domains, and left Windows users 
vulnerable to Web content spoofing, phishing, and man-in-the-middle (MitM) attacks. 
Source: http://news.softpedia.com/news/Microsoft-Revokes-Rogue-Digital-Certificate- 
for-Google-and-Other-Web-Domains-476809.shtml 

22. March 26, Softpedia - (International) Apple customers lured to disclose Apple ID 
and card data. Security analysts at Bitdefender discovered a phishing scheme in which 
Apple device users are being targeted with emails that link to a hoax site requesting 
Apple ID credentials, personal information, payment card information, and a 3D Secure 
password. After users fill out the form, they are notified of a bogus two-factor 
authentication (2FA) process and are given an option to change their password. 

Source: http://news.softpedia.com/news/Apple-Customers-Lured-to-Disclose-Apple- 
ID-and-Card-Data-476817.shtml 



23. March 26, Securityweek - (International) Cisco fixes DoS vulnerabilities in IOS 
software. Cisco Systems released security updates patching 16 vulnerabilities in IOS 
and IOS XE software components including Autonomic Network Infrastructure (ANI), 
Common Industrial Protocol (CIP), multicast Domain Name System (mDNS), 
transmission control protocol (TCP), Virtual Routing and Forwarding (VRF), and 
Internet Key Exchange version 2 (IKEv2). The vulnerabilities allowed remote, 
unauthenticated attackers to trigger denial-of- service (DoS) conditions on targeted 
systems. 

Source: http://www.securitvweek.com/cisco-fixes-dos-vulnerabilities-ios-software 

24. March 25, Threatpost - (International) Default setting in Windows 7, 8.1 could allow 
privilege escalation, sandbox escape. A Google Security Project Zero researcher 
identified certain default authentication settings in Microsoft’s Windows versions 7 and 
8.1 that could allow attackers to use cross -protocol NT LAN Manager (NTLM) 
reflection to attack a local Server Message Block (SMB) server and leverage Web 
Distributed Authoring and Versioning (WebDAV) to elevate privileges or escape 
application sandboxes. Microsoft urged users to implement Extended Protection for 
Authentication (EPA) to mitigate the vulnerability. 

Source: https://threatpost.com/default-setting-in-windows-7-8-l-could- 
allow-privilege-escalation-sandbox-escape/1 11809 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

25. March 25, WXIN 59 Indianapolis - (National) Sprint service restored after massive 
outage spans Chicago area. Sprint reported March 25 that service was restored to an 
unspecified number of customers following a major network outage that affected 
customers’ voice and text messaging services in Chicago and the surrounding areas. 
The cause of the outage remains under investigation. 

Source: http://www.nbcchicago.com/news/local/Massive-Sprint-Service-Outage- 
Across-Chicago-Area-297594231.html 
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Commercial Facilities Sector 



26. March 26, Weather.com - (Oklahoma) Severe storm causes what appears to be first 
tornado- related fatality of 2015 in Sand Springs, Oklahoma. Tornado-producing 
storms that moved across Oklahoma, March 25 caused severe damage to a mobile 
home park in Sand Springs where one person was killed and several others were 
injured, and knocked out power to nearly 75,000 customers in the area. Both directions 
of Interstate 35 in Moore were closed and blocked by overturned vehicles, and Moore 
Public Schools canceled classes March 26 due to natural gas leaks and structural 
damage to businesses and homes. 

Source: http://www.weather.com/storms/severe/news/severe-thunderstorms-oklahoma- 
kansas-arkansas-missouri-texas-impacts 

27. March 26, Associated Press - (South Carolina) Meth lab explodes, Charleston motel 
evacuated. About 200 guests at the Intown Suites motel in the West Ashley section of 
Charleston, South Carolina, were evacuated for several hours March 25-26 after a 
portable meth lab exploded inside a bathroom and activated the building’s sprinkler 
system and alarms. Two individuals suffered minor injuries and were transported to an 
area hospital where they were charged in connection with the blast. 

Source: http://www.blufftontodav.com/bluffton-news/2015-03-26/meth-lab-explodes- 
charleston-motel-evacuated 



28. March 25, WZZM 13 Grand Rapids - (Michigan) Roof collapses in business fire, 
neighbors helping out. An Ottawa County office building suffered a roof collapse 
March 25 after a fire that broke out at Kleyn Electric spread to a second business 
housed inside the structure. The cause of the fire remains under investigation. 
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Source: http://www.wzzml3.com/storv/news/local/walker/2015/03/25/tallrnadge- 
ottawa-walker-standale-fire-kleyn-electric/70418106/ 



29. March 25, WKRN 2 Nashville - (Tennessee) 29 people displaced, black lab killed in 
Murfreesboro fire. A March 24 fire at the Hawthorne South Apartments building in 
Murfreesboro displaced 29 residents, and at least 8 units were affected by fire or water 
damage. No injuries were reported in the fire that remains under investigation. 

Source: http://wkrn.com/2015/03/25/29-people-displaced-bv-murfreesboro-apartment- 
fire/ 
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Dams Sector 

Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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